breautek commented on issue #342: URL: https://github.com/apache/cordova-plugin-inappbrowser/issues/342#issuecomment-2741560043
## Android If you're using certificates that isn't by a well known/trusted certificate author (such as a self-signed or an internal corporate signed certificate) then you'll need to provide the certificate with android's network security policy. By default Cordova doesn't have any network security config, so the config file will need to be created via `<config-file>`, and the android manifest will need to be modified via `<edit-config>`. You'll also need to provide the certificate as a raw resource using `<resource-file>`. This [SO](https://stackoverflow.com/a/71542188) post should help you understand how the security policy should be formed. After this, all android networking (including webview networking) should accept that certificate as trustworthy. Note that this only works for API 24 (Android 7)+ devices. ## iOS I'm not as experienced with iOS development but I do not believe there is a way to import self-signed certificates in a way that allows all networking in your application to use, like Android's network security policy. I believe the only way that is possible is through Apple's MDM (Mobile Device Management), or have the user install the certificate themselves. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org For additional commands, e-mail: issues-h...@cordova.apache.org